Nothing too out of the ordinary policies wise. We do run a security stack -- including ThreatLocker, which did the Kaby-R i7 in my work laptop no favors speed-wise, but doesn't seem to do badly on for RAM, hovering around 50 megs -- and for some workstations a BCDR agent pulling backups, but...